🟡 Medium ⏱ 10–30 min Last verified: 8 June 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3491-1 Related CVEs: CVE-2014-3209 CVE-2017-1000231 CVE-2017-1000232 Upstream summary: Leon Weber discovered that the ldns-keygen tool incorrectly set permissions on private keys. A local attacker could possibly use this issue to […]
🟠 High ⏱ 15–60 min Last verified: 20 April 2018 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2020:193-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-9103 CVE-2017-9104 CVE-2017-9105 CVE-2017-9106 CVE-2017-9107 CVE-2017-9108 CVE-2017-9109 Upstream summary: An issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from adns__findlabel_next. […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15120 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟢 Low ⏱ 5–15 min Last verified: 22 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4986-4 Related CVEs: https://launchpad.net/bugs/1931507 CVE-2017-8779 Upstream summary: USN-4986-1 fixed a vulnerability in rpcbind. The update caused a regression resulting in rpcbind crashing in certain environments. This update fixes the problem […]
🟠 High ⏱ 15–60 min Last verified: 2 October 2017 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:1306-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-8779 CVE-2015-7236 Upstream summary: rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data […]
🟢 Low ⏱ 5–15 min Last verified: 31 January 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3715-1 Related CVEs: https://launchpad.net/bugs/1721129 Upstream summary: This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover and refreshes the list of root hints. […]
🟡 Medium ⏱ 10–30 min Last verified: 24 January 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4986-4 Related CVEs: https://launchpad.net/bugs/1931507 CVE-2017-8779 CVE-2015-7236 Upstream summary: USN-4986-1 fixed a vulnerability in rpcbind. The update caused a regression resulting in rpcbind crashing in certain environments. This update fixes the […]
